Information Disclosure

2023-03-1008:26:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

saleor software vulnerability exception handling sensitive infrastructure

EPSS

0.002

Percentile

52.5%

JSON

saleor is vulnerable to Information Disclosure. The vulnerability exists due to lack of exception handling which allows an attacker to gain access to sensitive infrastructure detail information.

References

github.com/advisories/GHSA-3hvj-3cg9-v242

github.com/saleor/saleor/commit/1ad26554966377286a2715a919ff8f0deb0203ba

github.com/saleor/saleor/commit/5eb7c77408d63ed1a45b7a3ec5c8dd014391b4f2

github.com/saleor/saleor/commit/844555cef6de0bcf957d158970313128a1c0e8eb

github.com/saleor/saleor/commit/a4a7fc07679cbcbd950f1cf79f022ba2b6e543d3

github.com/saleor/saleor/commit/b93e784cd26adbcadeb2bf0fce160cebd8b75242

github.com/saleor/saleor/commit/e592b2a21c2eff6bba7f4697fa7a5b3e79e1be8a

github.com/saleor/saleor/releases/tag/3.1.48

github.com/saleor/saleor/releases/tag/3.10.14

github.com/saleor/saleor/releases/tag/3.11.12

github.com/saleor/saleor/releases/tag/3.7.59

github.com/saleor/saleor/releases/tag/3.8.30

github.com/saleor/saleor/releases/tag/3.9.27

github.com/saleor/saleor/security/advisories/GHSA-3hvj-3cg9-v242

EPSS

0.002

Percentile

52.5%

JSON

Related for VERACODE:39619